CVE Vulnerability Catalog

A Resource Exhaustion issue was discovered in Moxa NPort 5110, 5130, and 5150 that allows an attacker to exhaust memory resources by sending a large number of TCP SYN packets.

In FreeBSD 10.x before 10.4-STABLE, 10.4-RELEASE-p3, and 10.3-RELEASE-p24 named paths are globally scoped, allowing processes in one jail to read and modify the content of POSIX shared memory objects created by processes in another jail or the host system.

The DynamicMetadataProvider class in OpenSAML before version 2.6.1 fails to properly configure itself with the MetadataFilter plugins, leading to a lack of critical security checks such as signature verification and enforcement of validity periods.

The Dynamic MetadataProvider plugin in Shibboleth Service Provider before version 2.6.1 fails to properly configure itself with the MetadataFilter plugins and does not perform critical security checks such as signature verification and enforcement of validity periods.

Zoho ManageEngine Applications Manager version 13 before build 13530 is vulnerable to SQL injection via the widgetid parameter in /MyPage.do.

Zoho ManageEngine Applications Manager version 13 before build 13530 is vulnerable to SQL injection via the resourceid parameter in the getResourceProfiles action.

Zoho ManageEngine Applications Manager version 13 before build 13530 is vulnerable to SQL injection via the forpage parameter in the /MyPage.do?method=viewDashBoard request.

Zoho ManageEngine Applications Manager 13 is vulnerable to SQL injection via the groupname parameter in /manageConfMons.do.

Zoho ManageEngine Applications Manager version 13 before build 13530 is vulnerable to SQL injection via the resourceid parameter in a showPlasmaView action.

Zoho ManageEngine Applications Manager version 13 before build 13530 is vulnerable to SQL injection via the haid parameter in the /manageApplications.do?method=AddSubGroup request.

A heap-based buffer overflow in the loadbuf function in formisc.c in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted e-mail message.

The HashiCorp Vagrant VMware Fusion plugin version 5.0.3, when installed without VMware Fusion, allows a local attacker to create a fake application directory and exploit the suid sudo helper to escalate privileges to root.

In the Agent Frontend in Open Ticket Request System (OTRS) versions 3.3.x through 3.3.18, a crafted URL can be used to gain information such as database user and password.

Privilege escalation vulnerability in the admin portal for Intel Unite App versions 3.1.32.12, 3.1.41.18, and 3.1.45.26 allows an attacker with network access to cause a denial of service and/or information disclosure.

A vulnerability in Cisco Umbrella Insights Virtual Appliances 2.1.0 and earlier allows an authenticated, local attacker to log in to an affected virtual appliance with root privileges. The issue is due to the presence of default, static user credentials for the affected virtual appliance.

A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could allow an unauthenticated, remote attacker to gain unauthorized, elevated access to an affected device. The vulnerability occurs during a refresh upgrade or Prime Collaboration Deployment migration.

A vulnerability in the TCP state machine of Cisco RF Gateway 1 devices could allow an unauthenticated, remote attacker to prevent an affected device from delivering switched digital video (SDV) or video on demand (VoD) streams, resulting in a denial of service (DoS) condition. The vulnerability is due to a processing error with TCP connections to the affected device.

A vulnerability in the Guest Portal login page of Cisco Identity Services Engine (ISE) allows an unauthenticated, remote attacker to perform multiple login attempts exceeding the configured limit. The issue is due to insufficient server-side enforcement of the login attempt limit.

A vulnerability in the Cisco FindIT Network Discovery Utility could allow an authenticated, local attacker to perform a DLL preloading attack, potentially causing a partial impact to the device availability, confidentiality, and integrity. The issue arises from the application loading a malicious copy of a specific DLL file instead of the expected DLL file.

The restore_tqb_pixels function in hevc_filter.c in libavcodec, used in libbpg 0.9.7 and other products, miscalculates a memcpy destination address, which may lead to application crashes or other unspecified impacts.